CVE-2025-22082: iio: backend: make sure to NULL terminate stack buffer
In the Linux kernel, the following vulnerability has been resolved:
iio: backend: make sure to NULL terminate stack buffer
Make sure to NULL terminate the buffer in iiobackenddebugfswritereg() before passing it to sscanf(). It is a stack variable so we should not assume it will 0 initialized.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22082?
CVE-2025-22082 is considered a medium severity vulnerability due to potential stack buffer issues.
How do I fix CVE-2025-22082?
To fix CVE-2025-22082, ensure that the stack buffer in iio_backend_debugfs_write_reg() is NULL terminated before using it.
What software is affected by CVE-2025-22082?
CVE-2025-22082 affects the Linux Kernel, particularly versions prior to the patch addressing this vulnerability.
What does CVE-2025-22082 exploit?
CVE-2025-22082 exploits a stack buffer issue which may lead to improper handling of input data.
What is the recommendation for users regarding CVE-2025-22082?
Users are recommended to update their Linux Kernel to the latest version to mitigate risks associated with CVE-2025-22082.